Find Them, Bind Them – Industrial Control Systems (ICS) on the Internet

No ratings

Presented at phdays 2013 by

Johannes Klick

Daniel Marzin

People involved: Jan-Ole Malchow, Robert Fehrmann, Sascha Zinke, Prof. Dr. Roth Many industrial control systems are remotely administrated and can be found on the Internet via search engines like SHODAN. The authors of the research can show the distribution of SCADA/PLC systems over the world with their Industrial Risk Assessment Map (IRAM) using SHODAN. IRAM also shows vulnerabilities and possible exploits. The speakers will compare the first results of their own SCADACS Search Engine (SSE) with SHODAN. They are also going to discuss what happens if you combine IRAM, SSE and exploits into one application. Johannes Klick is a co-founder and Project Manager of the project SCADA and Computer Security Group (SCADACS). Having obtained a Bachelor of Science degree from the Freie Universität Berlin, he went on to achieve his Master of Science degree, focusing on IT and ICS security. Previously, he lectured on Computer Science at his alma mater, and worked as a software engineer and tester at Innominate Security Technologies AG. He is also a winner of a scholarship from the Friedrich Naumann Foundation for Freedom. Berlin, Germany Daniel Marzin is a co-founder and Reverse Engineer of SCADA and Computer Security Group (SCADACS). He is a Bachelor of Science of the Freie Universität Berlin, and is studying to achieve his Master of Science degree. Previously, he worked as a software developer at ImmobilienScout 24 and took an internship at Beta Systems Software. Berlin, Germany Johannes Klick, Daniel Marzin Johannes Klick, Daniel Marzin